Security update for curl SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2015:0248-1 Final 1 1 2015-02-03T12:38:43Z current 2015-02-03T12:38:43Z 2015-02-03T12:38:43Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for curl was updated to version 7.40.0 to fix two security issues. These security issues were fixed: - CVE-2014-8150: CRLF injection vulnerability in libcurl 6.0 through 7.x before 7.40.0, when using an HTTP proxy, allowed remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in a URL (bnc#911363). - CVE-2014-3707: The curl_easy_duphandle function in libcurl 7.17.1 through 7.38.0, when running with the CURLOPT_COPYPOSTFIELDS option, did not properly copy HTTP POST data for an easy handle, which triggered an out-of-bounds read that allowed remote web servers to read sensitive memory information (bnc#901924). These non-security issues were fixed: - http_digest: Added support for Windows SSPI based authentication - version info: Added Kerberos V5 to the supported features - Makefile: Added VC targets for WinIDN - SSL: Add PEM format support for public key pinning - smtp: Added support for the conversion of Unix newlines during mail send - smb: Added initial support for the SMB/CIFS protocol - Added support for HTTP over unix domain sockets, - via CURLOPT_UNIX_SOCKET_PATH and --unix-socket - sasl: Added support for GSS-API based Kerberos V5 authentication The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/opensuse-updates/2015-02/msg00040.html E-Mail link for openSUSE-SU-2015:0248-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings curl-7.40.0-2.35.1 libcurl-devel-7.40.0-2.35.1 libcurl4-7.40.0-2.35.1 libcurl4-32bit-7.40.0-2.35.1 The curl_easy_duphandle function in libcurl 7.17.1 through 7.38.0, when running with the CURLOPT_COPYPOSTFIELDS option, does not properly copy HTTP POST data for an easy handle, which triggers an out-of-bounds read that allows remote web servers to read sensitive memory information. CVE-2014-3707 moderate Please Install the update. https://lists.opensuse.org/opensuse-updates/2015-02/msg00040.html https://www.suse.com/security/cve/CVE-2014-3707.html CVE-2014-3707 https://bugzilla.suse.com/901924 SUSE Bug 901924 https://bugzilla.suse.com/951391 SUSE Bug 951391 CRLF injection vulnerability in libcurl 6.0 through 7.x before 7.40.0, when using an HTTP proxy, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in a URL. CVE-2014-8150 moderate Please Install the update. https://lists.opensuse.org/opensuse-updates/2015-02/msg00040.html https://www.suse.com/security/cve/CVE-2014-8150.html CVE-2014-8150 https://bugzilla.suse.com/911363 SUSE Bug 911363 https://bugzilla.suse.com/951391 SUSE Bug 951391